Identosphere 146: EU Wallet Workstreams • Prayers for Vittorio • Worldcoin Woes • SpruceID Standards Update featuring IETF work • DIF SC Nominations Time!
Identosphere 146: EU Wallet Workstreams • Prayers for Vittorio • Worldcoin Woes • SpruceID Standards Update featuring IETF work • DIF SC Nominations Time!
We curate the latest in decentralized identity, with upcoming events, use-cases and developments in open standards and the public sector. Your support is greatly appreciated
Identosphere’s Weekly Highlights
We Gather, You Read!
Still aggregating industry info. Show support by PayPal, or Patreon!
Upcoming
[California] Internet Identity Workshop #37 10/10-12 ← Ticket Sales Open
[Germany] Self Sovereign Identity at Eclipse: Why, What, and How? 10/17 Eclipse Con
Prayers for Vittorio
[tweet thread] You might have heard that I have pancreatic cancer 2023-08-01 Vittorio
What’s new is that the bleeding is accelerating, and it’s not impossible that I might die from it - soon. I can’t really piece together a good farewell tweet, but I also didn’t want to risk not having a chance to write any. 1/n.
Explainers
Secure Your Identity: Embracing Self-Sovereign Identity to Prevent Data Breaches 2023-08-02 Ayanworks
[Video] IDENTITY AND VERIFIABLE CREDENTIALS IN CARS – EVE MALER 2023-07-31 SC Magazine
Why do we even have identities in cars?
What else is your car connected to?
How should devs be thinking about security in this space?
Empowering Users with User-Owned Data: A Path to Data Privacy and Control 2023-08 Fission Codes
Many users care about data privacy, but their actions don't always match their concerns. Chakravorti lays out three possible reasons: 1) Data is intangible, and because we're not physically handing it over, it doesn't feel as meaningful to us 2) Users have little leverage to negotiate more data agency because they feel trapped in many services 3) Managing one's own data is complex.
Why It’s So Hard for Users to Control Their Data 2020-01-30 Bhaskar Chakravorti HBR
What we’re missing is a system that defines and grants users “digital agency” – the ability to own the rights to their personal data, manage access to this data and, potentially, be compensated fairly for such access. This would make data similar to other forms of personal property: a home, a bank account or even a mobile phone number.
Decentralized Identity for AI Personalities: Redefining Autonomous Agents 2023-07-29 CryptoPoliton
AI meets SSI??? Now things are getting weird
In the contemporary technological landscape, artificial intelligence (AI) plays an increasingly pivotal role. It intertwines with our daily activities, bringing significant advancements across diverse sectors, including healthcare, education, commerce, and social interaction. The focus of this discourse revolves around an innovative, yet complex concept of decentralized identity for AI personalities.
European
Controlling our virtual footprint: innovation for a secure and accessible digital identity 2023-02-05 BBVA
The entrepreneurial ecosystem plays a key role in developing this concept and the technology that supports it. Institutions are not lagging behind in this commitment, with initiatives at the EU level defining digital identity as a citizen's right. Regulation and innovation are making great strides on the road to this new conception of our virtual self.
[Series] The three key streams of work shaping the EU Digital Identity Wallet 2023-08-04 Pavol Hrina Accenture (H/T Kotryna Urbanaite)
eIDAS explained in three simple pictures:
Web Standards
Quarterly Standards and Working Groups Update 2023-08-03 Spruce ID
We are spearheading the SD-JWT VC specification in IETF that describes using Selective Disclosure JWTs (SD-JWT) to secure JSON-based Verifiable Credentials here. The High-Assurance Profile in the OpenID Foundation (OIDF) selected this SD-JWT VC as their preferred credential format. It is also under consideration by the eIDAS 2.0 Architecture Reference Framework (ARF). The specification will also be presented at IETF 117 before the OAuth2 Working Group.
Regulation
[KOSA, USA] Concerns about the Kids Online Safety Act R Street Institute
The Kids Online Safety Act (KOSA) is being marked up in the Senate Commerce Committee this week. Despite bipartisan opposition from over 90 human rights, LGBTQ+ and free-market groups, and a failure by the sponsors to address the legitimate concerns raised about the bill’s unintended consequences, it is widely expected to pass the committee.
Research
A Security Analysis of Blockchain-based DID Services 2021-01 Bong Gon Kim, Young-Seob Cho, Seok-hyun Kim, Hyoungshick Kimb, Stony Brook University
In this paper, we systemically explore key components of DID systems and analyze their possible vulnerabilities when deployed. First, we analyze the data flow between DID system components and analyze possible security threats. Next, we carefully identify potential security threats over seven different DID functional domains, ranging from user wallet to universal resolver. Lastly, we discuss the possible countermeasures against the security threats we identified.
Design of a Decentralized Identifier-Based Authentication and Access Control Model for Smart Homes 2023-07-05 Xinyang Zhao, Bocheng Zhong, Zicai Cui
Our experimental results demonstrate that the application of decentralized identifiers provides the model with various security attributes, including confidentiality, integrity, and traceability. Additionally, the model exhibits low time costs for each module, ensuring timely responses to access service requests and incurring lower gas consumption compared to other Ethereum-based methods. Thus, our research proposes a lightweight authentication and access control solution suitable for smart home environments.
Organization
Embracing Open Recognition at the Badge Summit 2023-08-02 We are Open - This community is committed to advocating for learners.
DIF Newsletter #34 - Steering Committee Elections - call for nominations - If you know someone who would be a good candidate, please submit their name to nominations@identity.foundation by Sept 4. Self-nominations are also fine!
Getting Started with Confluence Wiki 2021-06-10 TOIP
The ABCs of Self-Sovereign Identity: Exploring the Hypersign SSI Ecosystem 2023-07-31 Hypersign
Built using Cosmos-SDK and fully compatible with W3C DID specifications, we're redefining the ABCs. No longer 'A for Apple, B for Ball,' but delving into 'A for Attestation, B for Blockchain' and beyond!
Velocity Network NYC Assembly ’23
[Video] Trailblazers Challenge 2023-08-04 Velocity Network - engaging as many individuals as possible to download a Velocity Career Wallet and claim career and education credentials.
[Video] Powering up the global workforce 2023-08-02 Velocity Network - Advisory Board panel
[Video] Builders Stage - Aon, Azilen, Greenlight Credentials, Korn Ferry 2023-08-02 Velocity Network - Aon, Azilen, Greenlight Credentials and Korn Ferry showed how they are integrating their technology solutions with the Velocity Network
[Video] Velocity Network™ can power up the global education system 2023-08-01 Velocity Network - why Velocity Network™ can power up the global education system
Company News
2023 Product Roadmap: Transforming Crypto Compliance Landscape 2023-07-31 Notabene
Our mission has always been to enable safe and trusted crypto transactions. To operationalize this, we’ve created the most comprehensive and user-friendly platform for Compliance Officers to gain a holistic view to make the appropriate pre-transaction decisions in regulated crypto transactions.
Speaker Profile: Mike Neuenschwander KuppingerCole
Kuppinger Kole’s newest Analyst
Mike joined KuppingerCole in 2023 as Lead Analyst and VP for KuppingerCole, Inc. (US). He has worked in the digital identity space for 17 years, and was involved in creating some of the early products in the market.
What’s new with Microsoft Entra ID Protection 2023-07-31 Microsoft
The first detection is verified threat actor ID. In the past couple of years, a lot of the major security incidents have been initiated by known nation state actors and cyber-crime groups. By utilizing the research carried out by the various security teams at Microsoft, we’ve created a comprehensive knowledge base of these actors, which we now use to assign real-time sign-in risk to sign-ins performed by them.
Identity not SSI
ID2020 and Digital Impact Alliance Join Forces to Champion People-Centric Digital Transformation 2023-08-02 DIAL
Going forward, the Digital Impact Alliance will house ID2020’s unique knowledge, products, and expertise in digital ID, and will integrate the importance of ethical digital ID in the continued promotion of inclusive and trusted digital public infrastructure and data governance.
Worldcoin
UK Authorities ‘Making Enquiries’ After Worldcoin Launch 2023-07-26 UKTech News
Worldcoin says will allow companies, governments to use its ID system 2023-08-02 Reuters
A critical analysis of Worldcoin 2023-08-04 Hira Siddiqui, Coinmonks
Why are people lining up for Worldcoin eyeball scans? “Easy $50” 2023-07-31 Rest of World
Worldcoin: a solution in search of its problem 2023-07-29 Molly White
The Web Needs A Way Of Proving That You’re A Real Person; Worldcoin Is Not The Solution 2023-07-26 Forrester
“The pitch is essentially, ‘Hey, get some free crypto!’” isn’t confidence-inspiring at the best of times. Given some of the dubious practices that a team from MIT uncovered during Worldcoin’s beta phase, one really might have expected the Worldcoin team to devote more care and attention
Worldcoin has a problem 2023-08-03 Rest of World
India already has a Worldcoin competitor, and other countries are taking note.
The Indian system is called the universal payments interface (or UPI), an open-source back end for money transfers across India. Designed to reach the millions of Indians without access to the banking system, UPI provides an easy way for anyone with an Indian national ID to start a bank account. Building the system as an API also lets existing apps like Google Pay serve as a front end — so all you need is an Android phone.
Thanks for Reading
Read more \ Subscribe: newsletter.identosphere.net
Contact \ Submission: newsletter [at] identosphere [dot] net